Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E18EC21609F811EABB42B37AF8AEA228.roa
File: E18EC21609F811EABB42B37AF8AEA228.roa (raw, json)
Hash identifier: v1+tha+cpgMxKP4jOhmIPLCq9vmJOicaYHr9tqBgJtg=
Subject key identifier: 76:62:02:41:D1:8C:82:6B:5B:77:B5:9B:C8:DD:8F:46:C3:4E:39:8B
Certificate issuer: /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial: A2
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access: rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E18EC21609F811EABB42B37AF8AEA228.roa
Signing time: Mon 18 Nov 2019 11:45:13 +0000
ROA not before: Mon 18 Nov 2019 11:45:08 +0000
ROA not after: Sat 17 Nov 2029 11:45:08 +0000
asID: 327687
IP address blocks: 137.63.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:21:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Validity
Not Before: Nov 18 11:45:08 2019 GMT
Not After : Nov 17 11:45:08 2029 GMT
Subject: CN=5dd28449-b788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:0f:59:0e:91:75:f3:2f:3f:b8:96:7a:2f:
ab:70:f0:ce:aa:65:19:12:e9:0e:01:64:d5:d1:e0:
05:4d:94:ea:c6:88:ff:12:c3:8d:6c:fc:09:91:c8:
95:58:c9:a0:ff:36:d6:b5:42:25:f2:95:30:ab:cc:
bb:36:e6:c5:f6:e5:3d:3a:fe:fd:3a:94:bc:71:98:
49:19:f2:cd:83:fa:31:48:bf:f4:cf:01:e3:d2:42:
15:18:0c:65:94:25:4a:d8:6a:fb:6d:9c:e6:c1:58:
05:c4:a2:9f:f8:8c:84:fb:ca:59:fb:fc:06:39:ea:
d9:44:88:7b:41:20:be:f6:50:5c:53:e3:65:b3:53:
92:de:f8:e5:43:19:50:f7:6a:ea:8f:ce:0f:ec:be:
75:a3:ad:f8:9d:61:9e:75:42:43:86:c1:36:89:97:
30:64:b6:20:21:3f:1e:5b:dc:42:97:35:ba:49:eb:
d0:9e:6d:48:11:44:94:44:97:15:6b:b7:71:a8:a1:
79:c4:91:bb:9b:05:1e:cb:4f:80:b5:28:5a:99:5e:
62:ff:eb:c6:0d:a7:ca:a8:b1:c0:c1:c7:54:54:9e:
01:61:d0:a3:7e:4c:ef:f8:3c:d3:d7:09:28:45:3d:
c1:55:3e:76:03:53:a3:27:8f:07:db:65:34:1f:dc:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:62:02:41:D1:8C:82:6B:5B:77:B5:9B:C8:DD:8F:46:C3:4E:39:8B
X509v3 Authority Key Identifier:
keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E18EC21609F811EABB42B37AF8AEA228.roa
sbgp-ipAddrBlock: critical
IPv4:
137.63.192.0/24
Signature Algorithm: sha256WithRSAEncryption
76:65:dc:14:09:79:f4:ca:50:18:c7:5e:6c:59:bd:7c:12:22:
ac:43:b8:37:93:a4:d6:43:d6:3b:4a:61:91:45:0a:86:b2:8d:
67:b3:0a:3d:3f:fe:67:ae:9b:eb:df:c2:04:82:cd:45:3a:c6:
22:a0:5f:0f:ba:3d:ef:30:3f:e3:a8:4b:63:3e:89:c0:70:1c:
a6:ba:f6:d6:ca:0a:3e:af:6f:00:b6:9e:2d:a5:44:7a:fc:04:
27:9a:33:9a:3a:5a:14:ed:2b:34:e0:9d:e0:72:a5:2e:26:e0:
ac:8d:d8:1c:ed:d5:54:87:78:13:60:08:e7:09:c3:12:4b:ab:
60:34:87:4d:e5:58:cc:6b:5d:cf:e2:ce:4c:e9:f2:06:b9:5d:
88:89:e9:ab:a8:3f:74:84:ff:d8:1a:73:b2:b2:e3:17:85:25:
97:61:34:a1:fc:7a:f0:87:e5:89:5b:2d:a3:35:cc:6d:11:a6:
74:8b:e9:c0:88:cc:04:22:99:27:ca:d0:3d:1c:ab:0a:25:c0:
1a:4f:ea:12:64:9a:22:03:59:05:8a:e7:e6:fc:e6:fc:72:90:
28:f2:e0:cf:77:2a:6b:62:f5:dd:80:18:68:15:9b:2d:fc:34:
39:ed:8c:4d:08:33:39:30:b1:f7:36:39:ae:49:29:cb:10:fa:
77:dc:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org